<?php
    // inkludera system bootstrap
    require './system/system.php';

    $username   =   $_POST['username'];
    $password   =   $_POST['password'];

    if(isset($_POST['submit'])) {
        if(isset($username)===FALSE || isset($password)===FALSE) {
            // Inkluderar bara ett meddelande om att fälten är tomma.
            // Kombineras med mer mallar nedanför.
            $view->load('login/fields-empty.php');
        } else {
            $sql = sprintf(
                'SELECT username FROM member WHERE username="%1$s" AND password="%2$s" LIMIT 1',
                mysql_real_escape_string($username),
                mysql_real_escape_string($password)
            );

            $query = mysql_query($sql) OR die(mysql_error());
            $row = mysql_fetch_row($query);

            if(empty($row)===TRUE) {
                $view->load('login/user-do-not-exists.php');
            } else {
                $_SESSION['loggedin'] = $username;
            }
        }
    }

    if(isset($_SESSION['loggedin'])===FALSE) {
        $view->load('login/form.php');
    } else {
        header('Location: ./index.php');
    }